We use cookies to allow us and selected partners to improve your experience and our advertising. By continuing to browse you consent to our use of cookies. You can understand more and change your cookies preferences here.

28 April 2021

How to spot a text message scam

Messaging scams can be very convincing, so it’s important to know what to watch out for to stay ahead of the fraudsters.
Which?Editorial team


'FluBot' malware scam delivery message

Watch out for scam package delivery messages containing dangerous 'FluBot' malware. 

Affecting Android devices, these messages have been found to contain a dodgy link to download an app that can infect your phone with malware. The malware can harvest passwords and other personal information, it also accesses contacts to send out further messages.

Always be wary of unsolicited texts, and think twice before you click on a link. If you think you've received a genuine delivery message, but you’re not certain, then contact the delivery company’s official customer service helpline to verify the message. 

If you've received a similar message and you think it’s a scam you can simply delete it. If you'd like to report it then you can do so by forwarding the message to 7726 - a free reporting service provided by phone operators.

If you've received this message and you've already downloaded the infected app then follow these steps:

  • Don't enter any passwords or log into any accounts.
  • Perform a factory reset on your device.
  • After resetting your device you may be prompted to restore from a backup, but do not restore any apps that you've accessed or downloaded since your device was compromised.
  • Once you've restored your device you should change your passwords on your accounts to ensure they are secure

What is a text or messaging scam?

Scammers are increasingly taking advantage of smartphones and are getting very clever with how they try to take your hard-earned money.

They can even make it look like a legitimate organisation is contacting you via text or a messaging app by using identity masking technology to change the name displayed as the sender. This is known as ‘number spoofing’.

If you get sent a scam message, it’s important you report it so others don’t fall victim. Reporting a scam message is free and it will help stop the spread of these messages, find out how to report a scam in our free guide.

Fraudsters can use many different types of messaging systems and apps, like SMS, WhatsApp, Facebook Messenger, Viber, Skype, Google Hangouts, Snapchat and many other platforms to try scam you out of your money.

What does a text message scam look like?

While scammers are getting more cunning at making a scam message look like the real thing, there are some signs you can watch out for. Read our seven tips to avoid messaging scams.

1 Unexpected contact

Think about how that organisation normally contacts you and if it isn't via a message, contact them directly to check it's legitimate.

A genuine organisation will never contact you out of the blue and ask you to verify your details, request personal or banking details or tell you to transfer money via a message.

If in doubt, contact the organisation using a number you've found independently of the message.

2 Check for spelling or grammar errors

Genuine organisations will rarely, if ever, make glaring spelling mistakes or grammatical errors, and if so it will usually be an isolated incident.

If the message doesn't look professional, it's probably a scam and you should be suspicious of it.

If you click the link in the message, it could send you to an imposter website set up to steal your money or personal data, or in some cases, it may infect your device with malware that can take over your phone.

Always look up an organisation's contact details independently and get in touch to verify the message.

4 Don't share any personal information

If you think you've been targeted by a scam text message, don't share any personal information, banking details or Pin.

Legitimate organisations, such as banks or HMRC, will never ask for your personal or banking details through a message or text.

Key Information

Spot a scam bank message

If you get a message purporting to be from your bank, always treat this with caution. And know the eight things your bank will never ask you.

Your bank should never:

  • Ask for your Pin or internet banking password
  • Send someone to your home to collect cards or banking information
  • Ask you to email or text personal or banking information
  • Email a link where you have to then input your internet banking details
  • Ask you to authorise a funds transfer which you haven’t requested
  • Tell you to invest in diamonds, land or other commodities
  • Ask you to carry out a test transaction
  • Send you to a mobile app other than their own official app

5 Contact the organisation directly

If you're suspicious, always check for their contact details online and get in touch directly to check it really was them.

Make sure you do this via a trusted contact number, such as the one listed on their website or one you've been given in any previous contact you've had with them via email or post.

6 Don't reply

If you reply, you could alert the scammers to the fact your number is active. This could then mean you'll receive a barrage of unwanted messages.

You should make a note of the number and the content of the message so you can report it, you could even consider taking a screenshot of it as evidence.

Then delete it from your phone.

7 Report it

If you get sent a scam message, it’s important you report it so others don’t fall victim.

You can do this by contacting your mobile provider if it was an SMS, or by forwarding the text message to 7726 - a free reporting service provided by phone operators. You should also report the scam to Action Fraud, no matter which platform you were contacted on.

Read more about how to report a scam in our free guide.

Key Information

The ‘Sarah’ scam message

The scammer targets parents and sends a message from an unknown number, pretending to be from Sarah - or another common woman’s name - and says they’ve been in an accident.

An example reported to Action Fraud reads:

‘Hi it’s Sarah. I need you to do a favour if possible. I had a small accident & broke my fibula & left elbow. Can you text me back once you get this message x’

However, there are many different variations of the scam which involved different emergency scenarios or different women’s names.

The aim is to get you to reply to the message which will send the scammer £20.